Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/SYfQnFJunRqPZ1Wp6BaV7fEpjX4.roa
File: SYfQnFJunRqPZ1Wp6BaV7fEpjX4.roa (raw, json)
Hash identifier: 2gk0fGgkTkW6WInqPjEIK18b4fdkW7vcNsqomyEIMqI=
Subject key identifier: 49:87:D0:9C:52:6E:9D:1A:8F:67:55:A9:E8:16:95:ED:F1:29:8D:7E
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 043861B4
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/SYfQnFJunRqPZ1Wp6BaV7fEpjX4.roa
Signing time: Thu 21 Apr 2022 11:51:56 +0000
ROA not before: Thu 21 Apr 2022 11:51:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 36.255.94.0/23 maxlen: 23
185.213.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70803892 (0x43861b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Apr 21 11:51:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4987d09c526e9d1a8f6755a9e81695edf1298d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:91:e6:5f:e6:a6:2a:7c:69:54:9c:b3:79:
e0:e3:1b:19:0b:80:ce:b0:df:88:e5:aa:25:48:36:
10:85:20:ef:4a:99:33:ad:f0:1d:54:c0:2d:da:14:
21:1e:95:88:71:85:b2:60:67:5f:36:e8:08:7d:bb:
bd:1d:46:f4:aa:79:a1:09:02:4b:f6:59:27:e8:e1:
97:a1:98:fc:72:54:19:e0:f6:94:fa:7a:83:6e:b6:
fd:62:9d:15:37:66:43:25:fa:72:20:f8:ab:b7:b5:
0f:77:5c:88:c3:3a:71:5f:4a:20:10:b0:a8:f4:c5:
07:07:d3:36:08:f5:01:18:cd:f1:80:8b:8f:16:9d:
7c:83:b6:eb:30:45:34:e2:33:e4:15:24:ec:0a:0c:
c4:97:3b:52:33:1d:5a:6b:6d:21:2d:be:ea:b0:0a:
0b:b7:ca:28:66:ae:d3:08:a5:0d:1f:0d:91:03:e7:
37:62:15:18:8f:1e:03:29:51:a4:fd:84:b9:ff:fd:
e0:86:26:a3:bb:33:48:a4:47:6f:03:43:be:a6:e2:
83:9c:04:fb:c0:2e:ec:91:87:42:ed:bf:fd:f8:48:
a5:d0:79:a7:69:b2:32:98:a3:4f:e4:6f:98:d3:c2:
83:da:3f:4c:95:08:84:44:17:d8:74:f2:d2:17:81:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:87:D0:9C:52:6E:9D:1A:8F:67:55:A9:E8:16:95:ED:F1:29:8D:7E
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/SYfQnFJunRqPZ1Wp6BaV7fEpjX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.94.0/23
185.213.242.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f8:c9:11:e2:3e:5e:42:8a:b5:3f:32:05:89:58:86:56:d7:
25:67:5a:a0:3c:71:1a:d6:ab:7b:f9:f5:18:5f:40:b4:a1:4d:
ab:a2:fd:4f:8c:c7:ae:80:6a:f3:c6:67:0b:67:c0:da:ea:fb:
49:9a:02:36:b0:21:8f:8c:01:ca:cd:8d:b7:5e:e4:56:37:1d:
35:c0:91:53:45:b3:92:8e:0c:34:a5:22:e9:27:97:13:99:4e:
6d:17:43:b6:2c:2e:25:8c:35:6b:3a:3a:62:35:00:f0:3f:04:
10:f6:96:95:45:b2:69:15:93:ab:df:3e:44:a2:5a:9d:0d:c9:
93:0f:d8:06:3f:2b:11:59:72:bb:86:d7:5d:9d:ea:ce:b1:22:
88:82:cb:5c:f1:cf:95:b8:14:7b:97:d0:08:72:e3:c4:a8:04:
ae:9d:6d:9e:e4:c6:f6:66:29:97:89:13:9d:2e:53:58:76:45:
eb:c3:a3:77:f4:9a:e9:3f:fb:d2:32:24:81:3d:ee:3b:87:48:
da:07:1f:b8:58:3e:cc:1f:b5:53:02:59:05:a1:cf:43:77:18:
7d:74:8a:43:67:5c:7f:91:a7:46:f7:29:bf:e4:e4:d1:ca:49:
4e:1f:c1:e3:85:3e:47:9e:17:a0:9c:7e:35:d8:d4:25:21:99:
f6:dc:76:dd
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBDhhtDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDg1Mzk3ZjI2YTA0NGNhZWY2YTZiNjY5Mjg3MzMxYWE0ZDY4NjQ1MB4XDTIyMDQy
MTExNTE1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDk4N2QwOWM1MjZl
OWQxYThmNjc1NWE5ZTgxNjk1ZWRmMTI5OGQ3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMUKkeZf5qYqfGlUnLN54OMbGQuAzrDfiOWqJUg2EIUg70qZ
M63wHVTALdoUIR6ViHGFsmBnXzboCH27vR1G9Kp5oQkCS/ZZJ+jhl6GY/HJUGeD2
lPp6g262/WKdFTdmQyX6ciD4q7e1D3dciMM6cV9KIBCwqPTFBwfTNgj1ARjN8YCL
jxadfIO26zBFNOIz5BUk7AoMxJc7UjMdWmttIS2+6rAKC7fKKGau0wilDR8NkQPn
N2IVGI8eAylRpP2Euf/94IYmo7szSKRHbwNDvqbig5wE+8Au7JGHQu2//fhIpdB5
p2myMpijT+RvmNPCg9o/TJUIhEQX2HTy0heB4QECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRJh9CcUm6dGo9nVanoFpXt8SmNfjAfBgNVHSMEGDAWgBRghTl/JqBEyu9q
a2aShzMapNaGRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lJVTVmeWFnUk1ydmFtdG1rb2N6R3FUV2hrVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2QvMTEyNWEyLTQ0MzItNDgzZi1hMDBiLTYxNmQ5N2E3N2JkNi8x
L1NZZlFuRkp1blJxUFoxV3A2QmFWN2ZFcGpYNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Qv
MTEyNWEyLTQ0MzItNDgzZi1hMDBiLTYxNmQ5N2E3N2JkNi8xL1lJVTVmeWFnUk1y
dmFtdG1rb2N6R3FUV2hrVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAST/XgMEALnV8jANBgkqhkiG9w0B
AQsFAAOCAQEAm/jJEeI+XkKKtT8yBYlYhlbXJWdaoDxxGtare/n1GF9AtKFNq6L9
T4zHroBq88ZnC2fA2ur7SZoCNrAhj4wBys2Nt17kVjcdNcCRU0Wzko4MNKUi6SeX
E5lObRdDtiwuJYw1azo6YjUA8D8EEPaWlUWyaRWTq98+RKJanQ3Jkw/YBj8rEVly
u4bXXZ3qzrEiiILLXPHPlbgUe5fQCHLjxKgErp1tnuTG9mYpl4kTnS5TWHZF68Oj
d/Sa6T/70jIkgT3uO4dI2gcfuFg+zB+1UwJZBaHPQ3cYfXSKQ2dcf5GnRvcpv+Tk
0cpJTh/B44U+R54XoJx+NdjUJSGZ9tx23Q==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:50 2025 by rpki-client